Apache Airflow scheduler deserialization flaw lets DAG authors run object constructors

Airflow job tool lets job authors take over the server.

Summary

The Apache Airflow scheduler deserializes stored data before checking it, so a DAG author can run object constructors inside the server process. Versions from 3.3.0 up to, but not including, 3.4.0 are affected, including installs already upgraded to 3.3.1.

What to do

Update to Apache Airflow 3.4.0 or later. Installs already upgraded to 3.3.1 must upgrade again for this issue.

Products and platforms

Apache Airflow

CVE IDs

CVE-2026-96285 (opens in a new tab)
CVE-2026-67260 (opens in a new tab)

Sources

Advisory: lists.apache.org (opens in a new tab) · lists.apache.org (opens in a new tab)
Discussion: CVE-2026-96285: Apache Airflow: Scheduler: next_kwargs deserialized before the dict check, so resume data still invokes constructors (opens in a new tab)

Times

First published 2026-08-12 15:33 UTC

First seen 2026-11-09 12:16 UTC